Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/WP_I_o8UN9L5WtrE075PZzbfpNA.roa
File: WP_I_o8UN9L5WtrE075PZzbfpNA.roa (raw, json)
Hash identifier: gt2fSq/UR0eIZCLPRB5afoyt6erdypZ54yr3oGgLYMs=
Subject key identifier: 58:FF:C8:FE:8F:14:37:D2:F9:5A:DA:C4:D3:BE:4F:67:36:DF:A4:D0
Certificate issuer: /CN=f3c35e963e023a3caf3d304409268ffc45374122
Certificate serial: 01A06C8832B8DC5032AC661F946B488CAC05
Authority key identifier: F3:C3:5E:96:3E:02:3A:3C:AF:3D:30:44:09:26:8F:FC:45:37:41:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88Nelj4COjyvPTBECSaP_EU3QSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/WP_I_o8UN9L5WtrE075PZzbfpNA.roa
Signing time: Fri 04 Sep 2026 13:07:40 +0000
ROA not before: Fri 04 Sep 2026 13:07:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60994
IP address blocks: 185.23.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/88Nelj4COjyvPTBECSaP_EU3QSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/88Nelj4COjyvPTBECSaP_EU3QSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/88Nelj4COjyvPTBECSaP_EU3QSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:88:32:b8:dc:50:32:ac:66:1f:94:6b:48:8c:ac:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c35e963e023a3caf3d304409268ffc45374122
Validity
Not Before: Sep 4 13:07:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58ffc8fe8f1437d2f95adac4d3be4f6736dfa4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:90:2e:32:2c:db:93:c3:cc:e6:23:10:a0:
ee:c9:fe:fc:84:90:e9:19:7e:fe:c7:29:5a:ee:ae:
80:ce:09:ce:b7:43:00:c7:8a:87:41:1b:0b:d7:18:
f0:dd:2d:cc:4e:77:3a:f8:47:d6:f6:bb:39:e3:1c:
2b:ae:99:62:df:03:50:d4:b2:45:7c:48:af:b4:1c:
b5:6d:d8:68:e1:96:ca:2b:d2:5b:9b:d4:fd:31:05:
f6:02:03:4d:78:d8:e7:83:3e:10:01:5d:78:39:43:
ba:c8:8b:3b:a4:85:1f:f3:56:f0:7d:83:26:59:9a:
d3:a9:d7:7c:d2:03:40:08:51:de:36:c5:47:a9:c4:
a9:bb:47:f5:ea:28:f9:2e:d0:88:d3:97:5f:44:6f:
19:bd:42:3d:48:2e:e5:ef:05:6d:c3:a0:63:f8:52:
b5:1e:73:75:b3:c1:5d:71:cb:60:9e:3d:86:88:87:
15:4e:e2:33:a4:4d:4b:42:b2:73:0e:65:01:96:e3:
94:f2:ac:40:06:9b:3d:bc:d4:ef:37:e9:93:0b:26:
19:96:b6:61:db:47:de:f4:26:c4:38:1e:32:5d:fc:
46:49:4a:52:13:f4:25:cc:4a:ed:d6:98:3d:da:88:
1c:79:34:e4:ff:73:ea:08:4a:2a:0d:db:68:d3:a1:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:C8:FE:8F:14:37:D2:F9:5A:DA:C4:D3:BE:4F:67:36:DF:A4:D0
X509v3 Authority Key Identifier:
keyid:F3:C3:5E:96:3E:02:3A:3C:AF:3D:30:44:09:26:8F:FC:45:37:41:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88Nelj4COjyvPTBECSaP_EU3QSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/WP_I_o8UN9L5WtrE075PZzbfpNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0377c1-d62a-4b3a-b532-51f588b43ad9/1/88Nelj4COjyvPTBECSaP_EU3QSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.40.0/22
Signature Algorithm: sha256WithRSAEncryption
62:a9:3b:43:19:81:04:c2:77:1a:d2:de:64:57:02:51:d6:3a:
38:c1:2b:84:96:2c:66:93:79:4a:9e:54:bf:f1:3c:7c:1f:8f:
0b:51:bd:b3:2c:05:f6:ce:f9:a6:f6:56:c0:c0:ef:df:ec:8d:
c3:24:7e:51:7f:8f:d7:fa:8f:1b:eb:ba:a5:0a:f4:f9:ca:a1:
53:fa:31:06:17:eb:4c:6f:0f:cc:07:e8:80:e2:14:0d:d6:cd:
a7:dd:64:8a:55:b9:61:0b:1a:da:80:7e:b6:5b:16:90:8a:f0:
19:70:fd:3f:e6:58:ee:c6:1e:d3:6f:60:cf:4b:2a:28:92:ca:
d9:ee:8a:ae:a2:51:c2:95:23:7e:10:aa:9b:f6:76:c5:14:68:
ea:9f:f2:6c:73:16:65:61:4d:6f:b6:e3:f5:8c:34:bf:45:9f:
63:d6:d5:ac:14:bc:ec:56:21:21:e6:d0:67:87:da:88:f9:17:
8c:f9:37:60:6a:2e:3a:a7:20:5b:c9:b6:05:2e:fc:08:92:93:
63:a4:a4:98:d6:72:f3:e3:5c:01:9f:c2:bb:5e:c9:c4:3d:59:
02:40:6b:e3:3b:ee:75:45:a2:00:18:a4:a2:37:56:35:a1:71:
c2:67:2b:c2:d0:d2:db:bd:ab:6b:b0:14:47:e7:d9:f2:86:b3:
5d:4f:3e:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBsiDK43FAyrGYflGtIjKwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYzM1ZTk2M2UwMjNhM2NhZjNkMzA0NDA5MjY4ZmZjNDUz
NzQxMjIwHhcNMjYwOTA0MTMwNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGZmYzhmZThmMTQzN2QyZjk1YWRhYzRkM2JlNGY2NzM2ZGZhNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlCQLjIs25PDzOYjEKDuyf78hJDp
GX7+xyla7q6AzgnOt0MAx4qHQRsL1xjw3S3MTnc6+EfW9rs54xwrrpli3wNQ1LJF
fEivtBy1bdho4ZbKK9Jbm9T9MQX2AgNNeNjngz4QAV14OUO6yIs7pIUf81bwfYMm
WZrTqdd80gNACFHeNsVHqcSpu0f16ij5LtCI05dfRG8ZvUI9SC7l7wVtw6Bj+FK1
HnN1s8Fdcctgnj2GiIcVTuIzpE1LQrJzDmUBluOU8qxABps9vNTvN+mTCyYZlrZh
20fe9CbEOB4yXfxGSUpSE/QlzErt1pg92ogceTTk/3PqCEoqDdto06HzZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFj/yP6PFDfS+VraxNO+T2c236TQMB8GA1UdIwQY
MBaAFPPDXpY+Ajo8rz0wRAkmj/xFN0EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhOZWxqNENPanl2UFRCRUNTYVBfRVUzUVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wMzc3YzEtZDYyYS00YjNhLWI1MzIt
NTFmNTg4YjQzYWQ5LzEvV1BfSV9vOFVOOUw1V3RyRTA3NVBaemJmcE5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8wMzc3YzEtZDYyYS00YjNhLWI1MzItNTFmNTg4YjQzYWQ5
LzEvODhOZWxqNENPanl2UFRCRUNTYVBfRVUzUVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRcoMA0G
CSqGSIb3DQEBCwUAA4IBAQBiqTtDGYEEwnca0t5kVwJR1jo4wSuElixmk3lKnlS/
8Tx8H48LUb2zLAX2zvmm9lbAwO/f7I3DJH5Rf4/X+o8b67qlCvT5yqFT+jEGF+tM
bw/MB+iA4hQN1s2n3WSKVblhCxragH62WxaQivAZcP0/5ljuxh7Tb2DPSyooksrZ
7oquolHClSN+EKqb9nbFFGjqn/JscxZlYU1vtuP1jDS/RZ9j1tWsFLzsViEh5tBn
h9qI+ReM+Tdgai46pyBbybYFLvwIkpNjpKSY1nLz41wBn8K7XsnEPVkCQGvjO+51
RaIAGKSiN1Y1oXHCZyvC0NLbvatrsBRH59nyhrNdTz7n
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:28:45 2026 by rpki-client